$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.mft File: bX2AV2xLO-av9DH40yM49x_fAd0.mft (raw, json) Hash identifier: jdrCRlWR+Z9TBpZAZWgu+KOxa8PbwgdhdcJg/p2gDMI= Subject key identifier: A5:E4:15:5E:97:EE:C4:05:A3:C8:F1:FA:81:59:B2:60:54:39:43:0D Authority key identifier: 6D:7D:80:57:6C:4B:3B:E6:AF:F4:31:F8:D3:23:38:F7:1F:DF:01:DD Certificate issuer: /CN=A91FC1B8/serialNumber=6D7D80576C4B3BE6AFF431F8D32338F71FDF01DD Certificate serial: 0EC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bX2AV2xLO-av9DH40yM49x_fAd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.mft Manifest number: 0EB9 Signing time: Wed 20 Aug 2025 17:44:45 +0000 Manifest this update: Wed 20 Aug 2025 17:44:45 +0000 Manifest next update: Wed 27 Aug 2025 17:44:45 +0000 Files and hashes: 1: bX2AV2xLO-av9DH40yM49x_fAd0.crl (hash: tZP6Ka4OnaS+H3KZON/oY8nXfxok+nEj06hofdMEqAc=) 2: 4E150C0890FD11E98DB54881C4F9AE02.roa (hash: dB+hpclNcZTfVrplk+B2uDeZoqPu8XwgAkOEwxQUS0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.crl rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bX2AV2xLO-av9DH40yM49x_fAd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 17:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3777 (0xec1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC1B8, serialNumber=6D7D80576C4B3BE6AFF431F8D32338F71FDF01DD Validity Not Before: Aug 20 17:44:45 2025 GMT Not After : Aug 27 17:44:45 2025 GMT Subject: CN=68a6098d-8aaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:08:d1:5b:5f:5f:d2:4a:eb:6b:10:9e:00:bb: 67:cc:ec:24:65:37:e2:6c:16:af:16:ab:c1:86:cc: 7a:2f:d9:e5:f3:b1:ae:15:38:7d:fc:06:78:93:7f: c5:56:d9:38:28:11:32:0f:76:a3:04:e7:54:43:85: d4:cb:4a:63:de:93:80:35:75:08:ca:00:3a:fb:05: 10:47:c7:9d:6d:8b:cf:fb:41:c2:d3:35:e2:ae:fb: ff:3d:0c:b7:d5:82:83:79:28:c8:0f:30:a6:97:87: a4:c6:75:28:16:20:58:65:88:96:81:bb:0d:77:c5: ad:39:7d:4a:09:4d:04:0b:2c:11:93:ab:47:bc:1a: 39:f5:4b:e5:77:85:26:23:3e:df:70:74:de:c1:f0: ce:6b:f6:bf:3f:2b:f9:11:d9:58:b6:1f:63:d4:db: 64:27:48:10:f8:dd:12:f5:45:bf:87:ca:17:a4:04: be:1f:15:20:6f:46:82:34:28:62:d9:f4:af:54:c2: 9d:65:c2:6d:b9:21:13:81:94:75:02:f9:b8:c4:08: 21:b8:ec:05:e2:30:0a:aa:47:08:ca:b6:f8:56:36: 4f:50:a8:d4:2a:73:8a:3d:fe:da:a8:45:2e:ba:05: 31:38:06:8f:f1:85:d3:c6:5b:4f:d0:4d:3e:ef:65: f6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E4:15:5E:97:EE:C4:05:A3:C8:F1:FA:81:59:B2:60:54:39:43:0D X509v3 Authority Key Identifier: keyid:6D:7D:80:57:6C:4B:3B:E6:AF:F4:31:F8:D3:23:38:F7:1F:DF:01:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bX2AV2xLO-av9DH40yM49x_fAd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:91:0d:9b:96:c8:66:d5:27:55:79:34:16:9a:ea:84:7c:26: 84:99:55:6e:9f:82:e3:f1:6a:ae:5e:71:dd:2a:6c:c3:56:6d: b8:93:f6:9d:cc:0f:30:58:02:24:64:20:1e:7e:d4:92:03:52: 1e:65:6e:98:a0:d3:59:39:86:e5:76:49:f9:43:6c:1a:3d:f1: a7:76:24:53:a3:36:57:22:b5:b0:5a:48:2c:a6:b4:e9:42:52: 98:82:f8:a1:dd:a8:46:32:66:41:89:0a:82:d1:8e:ab:33:5f: cc:ab:26:2f:17:8a:cc:52:1c:b8:46:eb:98:b8:1e:42:35:9a: 08:51:7e:a8:94:ee:b4:79:ab:65:e0:7b:f6:52:c4:7a:06:d6: b2:f0:01:eb:64:5c:71:c4:42:6b:15:27:2d:3d:7e:12:fc:19: 86:37:f3:4d:e5:c4:a0:a8:d5:84:3e:88:67:04:07:7f:d7:69: 8e:bf:78:6f:5f:e4:61:8b:de:a6:eb:50:8e:84:f2:f3:18:49: 9b:f6:c8:5b:98:84:4a:49:98:d6:b6:f8:5d:05:1d:ea:f4:ba: 40:a2:3b:26:15:9a:53:f5:ab:a2:ac:8c:de:2f:44:06:15:7c: 18:1b:02:06:83:0e:e9:a4:c3:35:4a:33:04:c4:da:33:6e:04: 8c:40:ee:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkMxQjgxMTAvBgNVBAUTKDZEN0Q4MDU3NkM0QjNCRTZBRkY0MzFGOEQzMjMzOEY3 MUZERjAxREQwHhcNMjUwODIwMTc0NDQ1WhcNMjUwODI3MTc0NDQ1WjAYMRYwFAYD VQQDEw02OGE2MDk4ZC04YWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkwjRW19f0krraxCeALtnzOwkZTfibBavFqvBhsx6L9nl87GuFTh9/AZ4k3/F Vtk4KBEyD3ajBOdUQ4XUy0pj3pOANXUIygA6+wUQR8edbYvP+0HC0zXirvv/PQy3 1YKDeSjIDzCml4ekxnUoFiBYZYiWgbsNd8WtOX1KCU0ECywRk6tHvBo59Uvld4Um Iz7fcHTewfDOa/a/Pyv5EdlYth9j1NtkJ0gQ+N0S9UW/h8oXpAS+HxUgb0aCNChi 2fSvVMKdZcJtuSETgZR1Avm4xAghuOwF4jAKqkcIyrb4VjZPUKjUKnOKPf7aqEUu ugUxOAaP8YXTxltP0E0+72X2SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXkFV6X 7sQFo8jx+oFZsmBUOUMNMB8GA1UdIwQYMBaAFG19gFdsSzvmr/Qx+NMjOPcf3wHd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzFCOC9GQkRFOTlGQTkw RkIxMUU5OTJENTk4N0ZDNEY5QUUwMi9iWDJBVjJ4TE8tYXY5REg0MHlNNDl4X2ZB ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JYMkFWMnhMTy1hdjlESDQweU00OXhfZkFkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzFCOC9GQkRFOTlGQTkwRkIxMUU5OTJENTk4N0ZDNEY5QUUwMi9iWDJBVjJ4TE8t YXY5REg0MHlNNDl4X2ZBZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPkQ2blshm1SdVeTQWmuqEfCaEmVVun4Lj8WquXnHdKmzDVm24k/ad zA8wWAIkZCAeftSSA1IeZW6YoNNZOYbldkn5Q2waPfGndiRTozZXIrWwWkgsprTp QlKYgvih3ahGMmZBiQqC0Y6rM1/MqyYvF4rMUhy4RuuYuB5CNZoIUX6olO60eatl 4Hv2UsR6Btay8AHrZFxxxEJrFSctPX4S/BmGN/NN5cSgqNWEPohnBAd/12mOv3hv X+Rhi96m61COhPLzGEmb9shbmIRKSZjWtvhdBR3q9LpAojsmFZpT9auirIzeL0QG FXwYGwIGgw7ppMM1SjMExNozbgSMQO7e -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:16 2025 by rpki-client